PT-2016-4027

Name of the Vulnerable Software and Affected Versions Apache Solr versions prior to 5.3.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the entry parameter to a plugins/cache URI in the stats page of the...

Solr 3.5.0 - Arbitrary Data Deletion

Exploit Title: All Solr Data Can Be Delete Google Dork: intext:Schema Config Analysis Schema Browser Statistics Info Distribution Ping Logging Date: 5/2/2016 Exploit Author: N37 Myanmar Vendor Homepage: http://lucene.apache.org/solr/ Software Link: https://archive.apache.org/dist/lucene/solr/3.5....

Solr 3.5.0 - Arbitrary Data Deletion

Exploit for java platform in category web applications Exploit Title: All Solr Data Can Be Delete Google Dork: intext:Schema Config Analysis Schema Browser Statistics Info Distribution Ping Logging Date: 5/2/2016 Exploit Author: N37 Myanmar Vendor Homepage: http://lucene.apache.org/solr/ Software...

Solr 3.5.0 - Arbitrary Data Deletion

Solr 3.5.0 - Arbitrary Data Deletion Exploit Title: All Solr Data Can Be Delete Google Dork: intext:Schema Config Analysis Schema Browser Statistics Info Distribution Ping Logging Date: 5/2/2016 Exploit Author: N37 Myanmar Vendor Homepage: http://lucene.apache.org/solr/ Software Link:...

Apache Solr 5.3.x 'XMLResponseParser.java' XXE

Binary data 9072.prm...

Apache Solr 5.3.x < 5.3.2 Authentication Bypass

Binary data 9073.prm...

Apache SOLR 未授权访问

No description provided by source...

Apache Solr Search - Moderately Critical - Access Bypass - SA-CONTRIB-2015-170

This module enables you to connect to an Apache Solr search server to provide a replacement for Drupal core content search and provide both extra features and better search performance and relevance. The module doesn't correctly check access when attempting to delete non-default search...

Apache Solr < 5.3 'schema-browse' XSS

Binary data 8983.prm...

Apache Solr < 4.10.5 'plugin.js' XSS

Binary data 8974.prm...

Apache Solr < 5.3.1 XSS

Binary data 8990.prm...

Apache Solr < 5.1 Multiple XSS

Binary data 8975.prm...

Apache Solr Version Detection

Binary data 8967.prm...

Apache Solr Detection

Binary data 8966.prm...

CVE-2015-5506

The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote attackers to obtain information about unpublished content via a search...

Code injection

The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote attackers to obtain information about unpublished content via a search...

CVE-2015-5506

The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote attackers to obtain information about unpublished content via a search...

CVE-2015-5506

The vulnerability CVE-2015-5506 affects the Drupal Apache Solr Real-Time module (7.x-1.x) prior to 7.x-1.2. The root cause is that the module does not check the status of an entity when indexing, allowing remote attackers to retrieve information about unpublished content through search results. I...

CVE-2015-5506: Exposure of Sensitive Information to an Unauthorized Actor

The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote attackers to obtain information about unpublished content via a search...

PT-2015-6958

Name of the Vulnerable Software and Affected Versions Apache Solr Real-Time module versions 7.x-1.x before 7.x-1.2 for Drupal Description The issue allows remote attackers to obtain information about unpublished content via a search because it does not check the status of an entity when indexing...